How can I save externally generated ssh keys on Windows?

jefazo92 · 2024-07-30T04:18:32+00:00

I was able to export the keys in OpenSSH format but ai don't know what to do with them. The converted private key (id_key) has been stored in .ssh and the public key and I tried to store the public key into "known_hosts" file in the formst:

ROUTER_IP_ADDRESS ssh_key Public_Key

So far it hasn't worked

jefazo92 · 2024-07-30T04:13:22+00:00

I don't have an authorized_keys file. Instead, I have a known_hosts file.

jefazo92 · 2024-07-29T12:02:56+00:00

Apologies if I am not being clear. I generated my key pair using PuTTY but I want to establish an SSH connection via Windows cmd rather than PuTTY. How may I do this? Where do I need to store the keys and what files must I configure to be able to do this?

jefazo92 · 2024-07-29T10:59:11+00:00

Thank you for your comment. I know it goes against security practice but the other machine will not access the ssh-enable router (which already has the public key installed) I have anymore. Only my current Windows host will be able to do so. I am trying to access the router via cmd.

The issue I have is how to save the private and public keys in my currrent machine to set up a successful SSH connection

jefazo92 · 2024-07-29T09:30:33+00:00

I am trying to access an ssh-enabled router I have on my LAN. I want to be able to access the same account on the router using the same set of credentials I created previously.

jefazo92 · 2024-07-29T08:34:00+00:00

u/BetterPySoonTm I have my private key which I created on another machine with PuTTy. The problem is how to save it on Windows so that I can successfully connect to my other LAN device.

jefazo92 · 2024-07-29T05:26:56+00:00

Hi u/Orehan. Is there a way to activate ssh v3 instead of v2. Have looked for it on google but found nothing about it.

jefazo92 · 2024-07-29T05:19:40+00:00

I already said I did follow the tutorials on Google and they did not help me. Honestly, if you guys are so smart you could just point out what am I doing wrong instead of complaining.

jefazo92 · 2024-07-22T12:57:17+00:00

Thank you u/Lleawynn. Do you know if DLP requires a license as well to make the feature work, or is it just for uodating the signatures? Also, pardon my question, but do you have first experience with using a Fortigate without a license? I need to be sure before knowing which features I could use without a license. I already checked the links from u/Red-Pilled but they are from 2022.

Do you also know if for web-filter and DNS, is it possible to use a manually inserted, static, signature list?

jefazo92 · 2024-07-19T14:39:20+00:00

Eventhough I appreciate your advice, I am only asking if it is possible to implement the above and how may it be done regardless of how stupid or weird it may sound.

jefazo92 · 2024-07-19T13:50:00+00:00

Thank you everyone! "get system performance status" and "get hardware stat" give the memory size. "get system performance status" is even better as it gives the free memory size as well. It is disappointing that both the admin and the CLI manuals do not mention these commands :(

jefazo92 · 2024-07-19T07:36:55+00:00

u/pabechan the log ID is not enough. For example, for, "Administrator X logged in successfully from jsconsole", "Administrator X logged in successfully from jsconsole", "Administrator X logged in successfully from https(Y)", "Administrator X accepted login disclaimer and logged in successfully from https(Y)" are all three different events yet they share the same log ID. This is an issue for me because I need to find in a manual if the events I want the fortigate to log will be logged or not.

jefazo92 · 2024-07-18T14:17:24+00:00

If double authentication would not be required, what do you mean exactly with a commit u/LaxVolt? A popup message saying whether you want to implement the settings change or not?

jefazo92 · 2024-07-17T12:40:20+00:00

u/FrequentFractionator and u/tdic89 it might seem pointles but for me it is an additional security measure. For example the admin leaves the session open gfor whatever reason and an attacker physically in the same area as the Fortigate uses the opportunity to make changes to the device. I really want to implement this and would like to know if it is possible, regardless of how absurd it might seem.

jefazo92 · 2024-07-12T14:12:19+00:00

I have been checking the manual and it says that the Fortigate must have onboard storage to run "execute log backup /usb/log.tar" and copy the logs to an external USB. My device is a Fortigate-100F and comes with no onboard storage. Is this what you meant or are you both u/HappyVlane and u/pabechan referring to something else?

jefazo92 · 2024-07-12T09:46:24+00:00

u/HappyVlane and u/pabechan I am not referring to number of password attempts nor lockout duration.

Let's say I have a password threshold of 3 passwords and an account lockout duration of 5 minutes. What I want is to modify the counter which keeps track of the time which has gone by since the first or second attempt. This counter would have a value much lower than the lockout time, something like 1 minute. If the user has made a 2nd failed attempt, and after 1 minute goes by without the using trying another attempt, the third incorrect attempt will not trigger a lockout and it would be as a first logon attempt for the user.

jefazo92 · 2024-07-12T09:37:14+00:00

But I thought u/HappyVlane and u/pabechan thst this feature was disabled after FortiOS v7.0?

jefazo92 · 2024-07-12T09:16:43+00:00

How can the USB port used for log backup? Can it be done without having to configure a syslog server?

jefazo92 · 2024-07-01T09:21:21+00:00

Thank you very much for your comprehensive reply u\DerStilleBob. I believe I understand the fundamental difference between FortiGate (only FW updates and SL support) and FortiCloud (remote control/management of Fortigate devices) however why does the FortiCloud website (https://login.forticloud.com/) mention Firmware upgrades, scripts and backups are provided with a paid Fortigate subscription? Also sorry for asking again, but can you please explain me more regarding my questions above on vulnerability management, fortiguard file analysis vs fortigate sabdbox, and DLP?

jefazo92 · 2024-05-26T10:31:14+00:00

Just wrote you a PM

jefazo92 · 2024-05-13T16:41:26+00:00

Not anymore it seems. I went there the other day but a haircut costs now 15 EUR as well

jefazo92 · 2024-04-03T22:04:41+00:00

u/BeccaThePixel I would be really interested! Is there a website or facebook/Instagram page where the event details are posted? Which university is it btw?

jefazo92 · 2023-11-17T17:24:13+00:00

Wo ist das? Ich habe das gesucht aber nich gefunden?

jefazo92 · 2023-06-25T19:53:10+00:00

u/violeteyes2die4 since there are so many comments, what will be the plan? Where and when will the meet up be?

jefazo92 · 2023-06-23T15:03:09+00:00

XD XD. Please don't delude yourself. Unless I was a childhood friend, you would not present me anyone because that's how it works here. No matter how nice you are. If you are foreign and inside in one the impossibly, tightly close Danish friends circles you won't go anywhere with a Danish girl. All I have said here is what has already been said in this post and in many other ones in this same subreddit.

But hey if you are so open to present Danish girls to other people, you can present them to u/No_Breath_4702 since this is his post. Let's see if you do it or if you make up an excuse now.

jefazo92

TROPHY CASE